`$app_details['website_url']` should be escaped with `esc_url()`